JNCIP-ENT Layer 2 Authentication And Access Control Practice Question
An enterprise network administrator needs to configure 802.1X authentication on EX Series switches. Which statement is correct regarding the default behavior of the supplicant timeout timer?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
It defines the duration the switch waits for an EAP-Request/Identity frame response before retransmitting.
The supp-timeout timer specifies the time the switch waits for a response to an EAP-Request/Identity frame from the supplicant before retransmitting.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
It dictates how long the switch waits before failing over to MAC RADIUS authentication.
Why it's wrong here
Incorrect. Fallover is controlled by authentication order and failure actions.
- ✗
It determines how long an authenticated client can remain idle before being disconnected.
Why it's wrong here
Incorrect. This describes the idle timeout.
- ✓
It defines the duration the switch waits for an EAP-Request/Identity frame response before retransmitting.
Why this is correct
Correct. supp-timeout dictates the wait time for the initial identity response.
- ✗
It specifies the interval before the switch drops the entire RADIUS authentication session.
Why it's wrong here
Incorrect. RADIUS timeouts are handled separately via server timeouts.
Quick reference
AAA Protocol Comparison
| Protocol | Port(s) | Encryption | Transport | Primary Use |
|---|---|---|---|---|
| RADIUS | 1812 / 1813 | Password only | UDP | Network access control |
| TACACS+ | 49 | Full packet | TCP | Device administration |
| Diameter | 3868 | Full session | TCP / SCTP | Carrier / mobile networks |
| 802.1X | — | EAP-based | Layer 2 | Port-based access control |
TACACS+ encrypts the entire packet; RADIUS only encrypts the password field — a key exam distinction.
About these practice questions
This JNCIP-ENT question is part of Courseiva's 336-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official Juniper Networks exam blueprint
This JNCIP-ENT practice question is part of Courseiva's free Juniper Networks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the JNCIP-ENT exam.